Re: best way to limit # of attempts to login to protected page?

This WebDNA talk-list message is from

2000


It keeps the original formatting.
numero = 35439
interpreted = N
texte = I also am not sure, but assume like you that a formvar overrides an URL-passed value. but even if so, then the would-be-hacker could simply view source code, see the incrementing formvar, and realize he could simply load the login form page fresh to reset the counter...Anup Setty wrote:> I pass the counter value as a formvariable, i.e., when I check for the > username and password, > and if it is wrong, I redirect them to the login page via auto form submit. > I think the formvariable > overrides the value passed through the URL, I'm not sure, you have a good > point there, I will have > to go back and do a test on that, > > anup ------------------------------------------------------------- This message is sent to you because you are subscribed to the mailing list . To unsubscribe, E-mail to: To switch to the DIGEST mode, E-mail to Web Archive of this list is at: http://search.smithmicro.com/ Associated Messages, from the most recent to the oldest:

    
  1. Re: best way to limit # of attempts to login to protected page? (Anup Setty 2000)
  2. Re: best way to limit # of attempts to login to protected page? (John Butler 2000)
  3. Re: best way to limit # of attempts to login to protected page? (Anup Setty 2000)
  4. Re: best way to limit # of attempts to login to protected page? (John Butler 2000)
  5. Re: best way to limit # of attempts to login to protected page? (Anup Setty 2000)
  6. Re: best way to limit # of attempts to login to protected page? (James Howarth 2000)
  7. best way to limit # of attempts to login to protected page? (John Butler 2000)
I also am not sure, but assume like you that a formvar overrides an URL-passed value. but even if so, then the would-be-hacker could simply view source code, see the incrementing formvar, and realize he could simply load the login form page fresh to reset the counter...Anup Setty wrote:> I pass the counter value as a formvariable, i.e., when I check for the > username and password, > and if it is wrong, I redirect them to the login page via auto form submit. > I think the formvariable > overrides the value passed through the URL, I'm not sure, you have a good > point there, I will have > to go back and do a test on that, > > anup ------------------------------------------------------------- This message is sent to you because you are subscribed to the mailing list . To unsubscribe, E-mail to: To switch to the DIGEST mode, E-mail to Web Archive of this list is at: http://search.smithmicro.com/ John Butler

DOWNLOAD WEBDNA NOW!

Top Articles:

Talk List

The WebDNA community talk-list is the best place to get some help: several hundred extremely proficient programmers with an excellent knowledge of WebDNA and an excellent spirit will deliver all the tips and tricks you can imagine...

Related Readings:

Help!!!! Purchases not going through! (1997) WebCat2b13MacPlugIn - [showif][search][/showif] (1997) Counting LineItems (2000) Invoice Data Fields (1999) bug in convertchars and char %0A (1998) Date Formats (1997) empty shopping cart message (1997) anyone interested in doing an open-source WebCat based forum? (2002) [addlineitems] display (1997) Multiple Users.db Possible? (1997) blank page from template (1997) WC2.0 Memory Requirements (1997) RE: WebDNA-Talk searchable? (1997) can WC render sites out? (1997) Missing contexts on NT (1997) WebCommerce: Folder organization ? (1997) A few questions. . . (1997) PSC recommends what date format yr 2000??? (1997) Further on formula.db failure to calculate shipCost (1997) PIXO (1997)